TrustedImageIdentifier

Applies To: Windows 7, Windows 8, Windows 8.1, Windows Server 2008 R2, Windows Server 2012 R2, Windows Vista

TrustedImageIdentifier specifies a unique identifier that signals that the files that are installed on the computer have already been scanned, and do not require additional on-access scans by Windows® Defender. Windows Defender is a Microsoft® application that can help to prevent, remove, and quarantine malware and spyware.

By default, Windows Defender performs a scan of each file on the computer when the computer accesses the file for the first time. This is known as an on-access scan. When Windows Defender performs a quick scan or a full scan (also known as on-demand scans), the rest of the files on the system will be marked as safe.

If you set a trusted image identifier, Windows Defender does not perform on-access scans of the individual files that belong to the trusted image. This can increase system speed.

Note

If you have already deployed a series of computers, and then later determine that there is a potential problem with the security of the image, contact your Depth Project Manager (PM) within the Windows Ecosystem Engagement team, and provide the unique identifier of the image. Microsoft will add this unique identifier into Windows Update. After a computer with that unique identifier receives updates from Windows Update, Windows Defender performs scans on all of the files on that computer.

Values

Trusted_identifier_ID

Specifies a Trusted_identifier_ID value. Trusted_identifier_ID is a string.

We recommend that you use a unique identifier, such as a GUID, for the value of this setting. Using a GUID allows you to easily identify the image.

Valid Configuration Passes

oobeSystem

offlineServicing

specialize

Parent Hierarchy

Security-Malware-Windows-Defender | TrustedImageIdentifier

Applies To

This setting does not apply to Windows Server® 2012 editions.

For a full list of the Windows editions and architectures that this component supports, see Security-Malware-Windows-Defender.

XML Example

The following XML output shows how to signal Windows Defender so that it does not scan the current set of files.

<TrustedImageIdentifier>{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}</TrustedImageIdentifier>

See Also

Concepts

Security-Malware-Windows-Defender

Other Resources

How to Configure a Trusted Image Identifier for Windows Defender